CVE - CVE-2007-1870

CVE-ID
CVE-2007-1870	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:23515 URL:http://www.securityfocus.com/bid/23515 BUGTRAQ:20070420 FLEA-2007-0011-1: lighttpd URL:http://www.securityfocus.com/archive/1/466464/30/6900/threaded CONFIRM:http://www.lighttpd.net/assets/2007/4/13/lighttpd_sa2007_02.txt CONFIRM:https://issues.rpath.com/browse/RPL-1218 DEBIAN:DSA-1303 URL:http://www.debian.org/security/2007/dsa-1303 GENTOO:GLSA-200705-07 URL:http://security.gentoo.org/glsa/glsa-200705-07.xml SECUNIA:24886 URL:http://secunia.com/advisories/24886 SECUNIA:24947 URL:http://secunia.com/advisories/24947 SECUNIA:24995 URL:http://secunia.com/advisories/24995 SECUNIA:25166 URL:http://secunia.com/advisories/25166 SECUNIA:25613 URL:http://secunia.com/advisories/25613 SUSE:SUSE-SR:2007:007 URL:http://www.novell.com/linux/security/advisories/2007_007_suse.html VUPEN:ADV-2007-1399 URL:~~http://www.vupen.com/english/advisories/2007/1399~~ (Obsolete source) XF:lighttpd-mtime-dos(33678) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/33678
Assigning CNA
MITRE Corporation
Date Record Created
20070405	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070405)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)